Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/ea72a38954c6c4fa15e1277c8b88ca3ef69bb349.roa
File:                     ea72a38954c6c4fa15e1277c8b88ca3ef69bb349.roa (raw, json)
Hash identifier:          V2dYAxEma5pxU3dJnVSW4kYrv+rCISAVS5xPjqgOV9g=
Subject key identifier:   84:2D:C9:37:B2:3E:F8:5C:39:36:AA:59:B5:DB:65:BA:2D:3D:4D:9A
Certificate issuer:       /CN=f199c15e83abff54c59af8a67e18495cb989d953
Certificate serial:       220C89
Authority key identifier: 42:B3:74:40:2E:D5:88:86:4D:ED:8F:6A:6D:76:3F:DF:67:8C:DE:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f199c15e83abff54c59af8a67e18495cb989d953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/ea72a38954c6c4fa15e1277c8b88ca3ef69bb349.roa
Signing time:             Tue 27 Jun 2023 18:56:59 +0000
ROA not before:           Mon 26 Jun 2023 18:56:58 +0000
ROA not after:            Fri 27 Jun 2025 18:56:58 +0000
asID:                     265768
IP address blocks:        190.112.32.0/21 maxlen: 21
                          2803:94c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231433 (0x220c89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f199c15e83abff54c59af8a67e18495cb989d953
        Validity
            Not Before: Jun 26 18:56:58 2023 GMT
            Not After : Jun 27 18:56:58 2025 GMT
        Subject: CN=ea72a38954c6c4fa15e1277c8b88ca3ef69bb349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:f5:be:56:c0:e7:8c:f2:da:4d:00:ca:74:
                    5b:a1:75:e4:42:1f:51:28:d1:b1:2c:72:df:a0:64:
                    2c:ec:6d:55:60:be:f8:54:48:d5:cf:db:d2:63:9d:
                    54:26:61:06:1c:00:bb:b5:fb:d8:b8:6f:5e:ee:50:
                    45:22:b8:3c:f7:dd:93:1a:b2:14:92:c4:c1:65:43:
                    bb:56:7d:06:f9:a0:5e:82:5e:8b:92:fd:77:17:f7:
                    b3:cc:41:8c:48:95:75:12:b4:cc:10:84:16:d0:3b:
                    9c:f0:22:8f:d2:c1:26:2d:b8:7c:ac:e3:13:e8:bd:
                    28:ab:22:26:01:e1:c9:ab:9f:26:c4:d0:b7:5c:c0:
                    08:09:1d:d1:48:30:56:0d:3f:7e:fe:26:d8:98:90:
                    23:b5:d0:ad:53:d6:ad:16:88:76:45:c2:ea:59:18:
                    3d:c7:61:04:14:55:a7:59:f6:64:06:a9:8f:a0:1c:
                    a8:f1:80:22:69:e0:fb:f7:e4:f2:23:2a:f3:ce:da:
                    d7:a1:34:93:0e:30:2c:24:26:8d:16:5a:e8:fc:e1:
                    08:0b:f0:a4:8c:56:f1:da:3f:02:4e:3d:a6:59:07:
                    e2:0f:7c:6d:7c:c3:9a:0c:2a:b4:1b:1a:79:01:da:
                    96:59:7c:34:43:5b:13:82:37:91:6f:2f:0c:9d:e3:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2D:C9:37:B2:3E:F8:5C:39:36:AA:59:B5:DB:65:BA:2D:3D:4D:9A
            X509v3 Authority Key Identifier:
                keyid:42:B3:74:40:2E:D5:88:86:4D:ED:8F:6A:6D:76:3F:DF:67:8C:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f199c15e83abff54c59af8a67e18495cb989d953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/ea72a38954c6c4fa15e1277c8b88ca3ef69bb349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/f199c15e83abff54c59af8a67e18495cb989d953.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:12:5b:b2:19:90:60:bb:0b:f8:72:96:bd:2f:67:72:70:
         85:1c:e8:b3:21:83:eb:98:43:67:4a:b4:20:dc:fb:96:2e:03:
         c5:56:5e:9e:89:3e:aa:4b:21:7f:a1:fc:e2:74:28:c3:0b:3a:
         fe:9e:f1:d7:6e:80:17:69:5a:36:f1:fb:0a:92:80:1a:3b:2a:
         c7:8f:f6:b4:bf:24:90:77:e7:74:d8:65:a8:d3:22:b7:46:9e:
         ec:fe:e1:69:56:c3:93:8d:ba:21:b9:20:2a:1b:9b:81:62:d4:
         79:64:60:3a:cf:bd:13:39:8c:70:f9:c6:b8:b2:9d:39:75:86:
         9f:e8:52:7c:14:7d:f6:c7:60:b5:2f:0e:8f:02:ba:b9:73:85:
         db:85:0a:e3:9a:f8:d9:f1:b8:f0:69:f1:86:c8:3c:d2:4c:4d:
         ba:0a:f8:2c:f1:98:7e:ad:ba:a3:df:7a:24:37:d5:a9:b1:78:
         63:aa:17:1b:55:0c:13:f4:c7:89:b4:ae:9c:0d:57:26:73:93:
         6d:d9:da:76:fb:c3:2f:a5:ed:eb:61:8d:7f:aa:d8:e3:bd:53:
         b0:3a:c9:fc:05:57:99:80:d6:e2:fa:d9:63:a6:79:2a:f6:54:
         9e:76:8f:2e:9a:25:84:b6:4d:bb:b6:48:ee:91:db:f9:8b:fa:
         d8:cd:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----